STIGQter STIGQter: STIG Summary: Samsung Android OS 9 with Knox 3.x COBO Use Case KPE(Legacy) Deployment Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 24 Jul 2020:

Samsung Android must be configured to disable automatic completion of Samsung Internet browser text input.

DISA Rule

SV-103679r1_rule

Vulnerability Number

V-93593

Group Title

PP-MDF-991000

Rule Version

KNOX-09-000585

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure Samsung Android to disable automatic completion of Samsung Internet app text input.

On the MDM console, for the device, in the "Knox restrictions" group, unselect "allow autofill".

Check Contents

Review device configuration settings to confirm that automatic completion of Samsung Internet app text input is disabled.

This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox restrictions" group, verify that "allow autofill" is not selected.

On the Samsung Android device, do the following:
1. From the "Personal" App screen, launch the "Samsung Internet" app.
2. From the collapsed menu icon (three horizontal bars) on the toolbar, tap "Settings".
3. Tap "Privacy and security".
4. Verify that "Autofill forms" is disabled, and cannot be enabled.

If on the MDM console "allow autofill" is selected, or on the Samsung Android device "Autofill forms" can be enabled by the user, this is a finding.

Vulnerability Number

V-93593

Documentable

False

Rule Version

KNOX-09-000585

Severity Override Guidance

Review device configuration settings to confirm that automatic completion of Samsung Internet app text input is disabled.

This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox restrictions" group, verify that "allow autofill" is not selected.

On the Samsung Android device, do the following:
1. From the "Personal" App screen, launch the "Samsung Internet" app.
2. From the collapsed menu icon (three horizontal bars) on the toolbar, tap "Settings".
3. Tap "Privacy and security".
4. Verify that "Autofill forms" is disabled, and cannot be enabled.

If on the MDM console "allow autofill" is selected, or on the Samsung Android device "Autofill forms" can be enabled by the user, this is a finding.

Check Content Reference

M

Target Key

3497

Comments